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Remarks 

This Application has been carefully reviewed in light of the Office Action mailed 
August 10, 2005. Applicants appreciate the Examiner's consideration of the Application. 
Applicants have made clarifying amendments to dependent Claims 5, 8, 14, and 17. 
These amendments are not related to any rejection made by the Examiner and are not 
considered narrowing or necessary for patentability. Applicants believe all claims are 
allowable without amendment and respectfully provide the following remarks. 
Applicants respectfully request reconsideration and allowance of all pending claims. 

I. The Claims are Allowable over Cooper 

The Examiner rejects Claims 1-18 under 35 U.S.C. 102(e) as being anticipated by 
U.S. Publication No. 2001/0051996 to Cooper ("Cooper"). Applicants respectfully 
disagree and discuss independent Claim 1 as an example. 

The cited portions of Cooper disclose a content distribution system site 200 that 
may include an interface module 250, which can provide a user interface across different 
user devices 1 15. (See Cooper, Tf 0059) The cited portions also disclose a Certification 
Authority 260, which is an entity that will issue, validate, revoke, and otherwise manage 
the digital certificates for the content distribution system 200. (See Cooper, If 0065) 
(providing examples of the entity — Certification Authority 260 — such as a large and 
well-known corporation that has established itself as being a trusted authority in the 
industry) The cited portions of Cooper also disclose a Copyright Registry System 234. 
(See Cooper, ^ 0095) According to Cooper, a consumer may use a user device 1 15 to log 
on to Copyright Registry System 234 (e.g., by accessing a web page), and a check is 
made to determine if the consumer has a valid digital certificate or private key/public key 
pair. (Id.) If not, or if they are out of date, then Copyright Registry System 234 may 
prompt the user as necessary to obtain a new and valid X.509 digital certificate/private 
public key pair. (Id.) 

However, among other distinctions, nowhere do the cited portions of Cooper 
disclose, teach, or suggest the following limitations recited in Claim 1 : 
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• a database . . . operable to receive and store the data protection rules and to 
receive and store a plurality of permissions generated by a data owner; and 

• an authorization management tool . . . operable to: 

access the database to validate that a permission exists for the data 
requester; and 

access the data protection rules in the database to validate that the 
particular set of data may be accessed by the data requester; 

For example, the cited portions of Cooper do not disclose, teach, or suggest "a 
database . . . operable to receive and store the data protection rules and to receive and 
store a plurality of permissions generated by a data owner," as recited in Claim 1 . The 
portions of Cooper cited with respect to these limitations of Claim 1 merely disclose a 
content distribution system site 200 that may include an interface module 250, which can 
provide a user interface across different user devices 115. (See Office Action at 2-3; 
Cooper, \ 0059) Furthermore, the cited portions disclose a Certification Authority 260, 
which is an entity that will issue, validate, revoke, and otherwise manage the digital 
certificates for the content distribution system 200. {See Office Action at 2-3; Cooper, If 
0065) (providing examples of the entity such as a large and well-known corporation that 
has established itself as being a trusted authority in the industry) 

Applicants assume the Examiner is relying primarily on the disclosure in Cooper 
of digital certificates. Even assuming for the sake of argument that the digital certificates 
disclosed in Cooper could be equated with one of "the data protection rules" or "a 
plurality of permissions" as recited in Claim 1 (which Applicants do not concede is even 
possible), the cited portions of Cooper would still fail to disclose, teach, or suggest a 
database operable to receive and store both "the data protection rules" and "a plurality 
of permissions" as recited in Claim 1 . 

As another example, the cited portions of Cooper do not disclose, teach, or 
suggest an authorization management tool operable to "access the database to validate 
that a permission exists for the data requester" and "access the data protection rules in 
the database to validate that the particular set of data may be accessed by the data 
requester" as recited in Claim 1. The portions of Cooper cited with respect to these 
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limitations of Claim 1 disclose a content distribution system site 200 that may include an 
interface module 250, which can provide a user interface across different user devices 
115. {See Office Action at 3; Cooper, If 0059) The cited portions of Cooper also disclose 
a Copyright Registry System 234. {See Office Action at 3; Cooper, f 0095) A consumer 
may use a user device 1 15 to log on to Copyright Registry System 234 (e.g., by accessing 
a web page), and a check is made to determine if the consumer has a valid digital 
certificate or private key/public key pair. {Id.) If not, or if they are out of date, then 
Copyright Registry System 234 may prompt the user as necessary to obtain a new and 
valid X.509 digital certificate/private public key pair. {Id.) 

Even assuming for the sake of argument only that the validation of the digital 
certificate of the user, as disclosed in the cited portion of Cooper, could be equated with 
one of "accessing] the database to validate that a permission exists for the data 
requester" and " access [ing J the data protection rules in the database to validate that the 
particular set of data may be accessed by the data requester," as recited in Claim 1 
(which Applicants do not concede is even possible), the cited portions of Cooper would 
still fail to disclose, teach, or suggest an authorization management tool operable to both 
"access the database to validate that a permission exists for the data requester" and 
"access the data protection rules in the database to validate that the particular set of 
data may be accessed by the data requester" as recited in Claim 1 . 

"A claim is anticipated only if each and every element as set forth in the claim is 
found, either expressly or inherently described, in a single prior art reference." Verdegaal 
Bros. v. Union Oil Co. of California, 2 U.S.P.Q.2d 1051, 1053 (Fed. Cir. 1987); M.P.E.P. 
§ 2131. In addition, "[t]he elements must be arranged as required by the claim." 
Richardson v. Suzuki Motor Co., 9 U.S.P.Q.2d 1913, 1920 (Fed. Cir. 1989); In re Bond, 
15 U.S.P.Q.2d 1566 (Fed. Cir. 1990); M.P.E.P. § 2131. As illustrated above, the cited 
portions of Cooper fail to disclose, either expressly or inherently, each and every 
limitation recited in Applicants' claims, as is required under the M.P.E.P. and governing 
Federal Circuit cases. 
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For at least these reasons, Applicants respectfully request reconsideration and 
allowance of independent Claim 1 and its dependent claims. For at least certain 
analogous reasons, Applicants respectfully request reconsideration and allowance of 
independent Claim 10 and its dependent claims. 

II. No Waiver 

All of Applicants' arguments and amendments are without prejudice or 
disclaimer. Additionally, Applicants have merely discussed example distinctions from 
the references cited by the Examiner. Other distinctions may exist, and Applicants 
reserve the right to discuss these additional distinctions in a later Response or on Appeal, 
if appropriate. By not responding to additional statements made by the Examiner, 
Applicants do not acquiesce to the Examiner's additional statements. The example 
distinctions discussed by Applicants are sufficient to overcome the Examiner's rejections. 
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Conclusion 



Applicants have made an earnest attempt to place the Application in condition for 
allowance. For at least the foregoing reasons, Applicants respectfully request full 
allowance of all pending claims. 

If the Examiner feels that a telephone conference or an interview would advance 
prosecution of the Application in any way, the Examiner is invited to contact the 
undersigned Attorney for Applicants at the Examiner's convenience at (214) 953-6813. 

Although Applicants believe no fees are due, the Commissioner is hereby 
authorized to charge any fees or credit any overpayment to Deposit Account No. 05-0765 
of Electronic Data Systems Corporation. 



Respectfully submitted, 



BAKER BOTTS L.L.P. 



Attorneys for Applicants 
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